DevSecOps Engineer, Engineering & Operations

JOB Objective

This position is responsible for designing, implementing, and supporting secure automation, Infrastructure as Code, and continuous integration and continuous delivery (CI/CD) capabilities across the organization’s technology environment. This role serves as a technical bridge between Infrastructure Engineering, Operations team, IT Security, Cloud Engineering, and Application Development. The DevSecOps Engine embeds security controls, automation, and governance through the technology lifecycle while enabling engineering teams to deliver scalable infrastructure, applications securely, consistently and efficiently. The ideal candidate is an automation-focused with strong infrastructure and security driven experience who understands how to transform traditional operational processes into repeatable policy-driven, and automated engineer practices. This position will play a key role in advancing DevSecOps, Infrastructure as Code, secure configuration management, vulnerability remediate, and platform engineering capabilities across on-premise and cloud environments.

DIMENSIONS

Components Supported: Multiple Redundant Datacenters

Multiple Cloud-Based Infrastructure (IaaS)

700+ Desktop Systems

100+ Mobile Devices

175+ Servers

Multiple Redundant Unified Communications Systems

26 Branch Locations & Spectrum Center

Supervisory responsibilitieS

This position reports directly to the VP, IT Engineering & Operations.

NATURE & SCOPE

• Design, implement, and maintain secure DevSecOps automation frameworks across infrastructure, cloud, application, and security platforms.
• Build and support CI/CD pipelines for application, infrastructure, and configuration deployment across development, testing, staging, and production environments.
• Develop Infrastructure as Code using tools such as Terraform, Ansible, VMware Aria, ARM/Bicep, PowerShell, Python, or Bash.
• Automate provisioning, configuration management, patching, vulnerability remediation, and security hardening across Windows, Linux, VMware, Azure, and hybrid environments.
• Integrate security controls into CI/CD pipelines, including vulnerability scanning, secrets detection, code scanning, configuration validation, and policy enforcement.
• Partner with Cybersecurity to support vulnerability management, security remediation, risk mitigation, penetration test findings, and audit response activities.
• Implement automated compliance and configuration checks aligned with FFIEC, NCUA, CIS, NIST, and internal security standards.
• Support secure cloud and identity governance across Microsoft Azure, Entra ID, RBAC, privileged access, service principals, and managed identities.
• Develop automation to improve operational reliability, monitoring, observability, incident response, and post-deployment validation.
• Partner with Infrastructure teams on VMware vSphere, NSX, Horizon, storage, server, network, and cloud modernization initiatives.
• Collaborate with Application Development teams to improve secure release management, deployment automation, source control, and SDLC practices.
• Support container and platform engineering capabilities using Docker, Kubernetes, or similar technologies.
• Create reusable automation templates, deployment standards, technical documentation, architecture diagrams, and operational runbooks.
• Promote security-by-design, automation-first, GitOps, and DevSecOps practices across technology teams.
• Evaluate emerging technologies and recommend improvements that enhance security, reliability, efficiency, and scalability.
• Exercises discretion and independent decision-making in IT necessary to ensure the growth of the credit union in a manner that supports the credit union’s mission and increases the profitability of the organization. 
• Performs other duties as required. 

Education, skills, & abilities

The Eight Superpowers

Other Education, Skills, and Abilities

• Experience working in a credit union, bank, financial services, healthcare, government, or other regulated environment.
• Familiarity with FFIEC, NCUA, GLBA, NIST Cybersecurity Framework, CIS Controls, and audit/regulatory expectations.
• Experience with VMware NSX, Horizon VDI, Azure networking, hybrid cloud, and enterprise infrastructure modernization.
• Experience with SAST, DAST, software composition analysis, container scanning, secrets management, and IaC security scanning.
• Experience with Jira, Jira Service Management, Confluence, ServiceNow, or similar ITSM and Agile tools.
• Experience with privileged access management, endpoint security, vulnerability scanning, and security orchestration tools.
• Experience with Docker, Kubernetes, Helm, or OpenShift.
• Certifications such as Azure DevOps Engineer, Azure Solutions Architect, Security+, CISSP, CCSP, Terraform, Ansible, VMware VCP, or Kubernetes certification preferred.

 MAJOR Accountabilities

• Increased adoption of Infrastructure as Code and automated deployment practices.
• Reduced vulnerability remediation timelines.
• Improved configuration compliance and audit readiness.
• More secure and reliable CI/CD pipelines.
• Reduced manual infrastructure and application deployment work.
• Stronger collaboration between Infrastructure, Cybersecurity, and Application Development.
• Improved operational stability, repeatability, and security across hybrid environments.

PHYSICAL REQUIREMENTS

ENVIRONMENTAL CONDITIONS

• Work is primarily performed within an enclosed office. Subject to standard background noise found in an office environment.

Note: Staff is expected to perform various tasks, projects and administrative duties as assigned

Management reserves the right to assign or change duties and tasks to this position at its discretion.

Salary Range (annually)

$130,813.6560 - $163,517.0700